Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: QjIc8dhE+w0rUMAXncBerNVeq2zP5/E7V3ZXN2CgqqA=
Subject key identifier: 97:91:35:EE:79:8B:A1:74:AB:89:08:D3:21:A2:95:33:E9:0C:E7:93
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 019F93C8AC803DEFB7A6C0798DB888F6B5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 0896
Signing time: Fri 24 Jul 2026 11:00:29 +0000
Manifest this update: Fri 24 Jul 2026 11:00:29 +0000
Manifest next update: Sat 25 Jul 2026 11:00:29 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: cHPaWfHFoAsPhbmeikI7rxyOUWIGAmlTMa4RqawRGg8=)
2: ajWUGAq6BMTKrTNOHft42ywINnc.roa (hash: Oc0Q5MG2sAXuAr4KfyQjmkzbXtqqCBE8bhQRqqONsEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ac:80:3d:ef:b7:a6:c0:79:8d:b8:88:f6:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: Jul 24 11:00:29 2026 GMT
Not After : Jul 25 11:00:29 2026 GMT
Subject: CN=979135ee798ba174ab8908d321a29533e90ce793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b3:67:d2:24:f9:2d:67:61:9b:95:62:87:db:
eb:4f:ed:47:44:40:0d:25:d4:f5:00:85:52:64:ed:
ab:1f:a0:a2:53:1a:48:65:82:71:39:ce:f6:93:c6:
4a:70:c9:6a:e5:10:bb:dd:89:ba:93:70:cd:dd:3f:
c5:88:f5:59:58:f1:ed:e3:9b:a1:cf:c3:67:64:62:
f7:08:44:df:f0:85:ac:0a:51:bf:c3:51:9c:33:a1:
23:73:82:2b:23:4b:0e:4c:23:d6:ad:a1:93:cb:bc:
a0:1a:bc:42:da:15:cc:15:17:2b:a1:41:c3:cf:e7:
a7:7e:5d:33:b2:ea:d7:11:e3:11:4b:c1:08:cc:3f:
fa:75:40:3b:ab:cd:ce:da:02:a0:f4:84:52:ba:5a:
e6:8b:c3:b4:b5:f1:42:cb:3e:6e:61:61:09:c8:91:
63:ee:0c:e2:b5:e0:57:14:db:31:4f:57:63:62:7f:
fd:c5:ae:d5:96:a8:4a:ee:c0:a0:a8:6c:1e:9b:de:
d9:b0:67:7d:68:34:92:98:13:c3:1c:80:6d:e4:42:
87:2a:63:91:11:0d:a2:f1:f3:4e:5c:4b:50:71:2b:
c1:17:00:de:32:83:c9:6d:02:71:9c:7b:a6:0f:b3:
76:0b:b3:e0:77:2f:54:9e:83:07:aa:70:97:f0:14:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:35:EE:79:8B:A1:74:AB:89:08:D3:21:A2:95:33:E9:0C:E7:93
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6a:6d:e8:d2:1a:f9:ad:0f:ca:1c:e2:24:bd:fa:35:7e:60:
54:1d:5e:ed:4d:42:c8:da:54:90:ac:7f:24:95:ab:84:7d:a0:
a5:58:f2:51:3c:00:97:0b:f6:47:dc:1a:87:3f:2a:40:b2:41:
0a:ab:96:c3:ab:56:af:bd:97:a8:40:74:a9:1b:cb:0a:49:0e:
7b:1b:4c:b4:f3:2e:2c:93:f3:27:c4:66:de:0f:5b:55:28:db:
cd:1f:77:10:6a:75:57:cb:14:bb:c5:f5:49:c4:c0:ea:a7:a4:
a2:bd:f2:2d:46:f2:0f:1e:3e:ac:1b:f0:5e:dd:a3:b7:13:93:
f5:c8:63:79:75:b0:b6:55:80:74:11:0d:1d:3e:7b:f1:93:55:
f3:7e:61:82:46:50:57:d7:b7:85:18:72:82:d1:b8:14:7c:a4:
e0:f1:56:ef:b6:37:cd:4f:7f:99:64:53:0a:77:b9:c3:db:82:
0f:b3:8e:6a:91:c8:e3:7d:15:56:ea:1e:f3:c8:67:1d:f8:7b:
d2:a8:f4:f9:ae:5a:1a:ef:c1:6a:00:48:bf:36:ba:cc:1b:d5:
85:52:f1:32:86:00:a2:8c:1d:ab:84:91:37:81:73:c6:3a:e8:
15:a3:75:99:62:d3:a9:67:04:81:fa:0a:c0:6c:65:a9:b2:38:
68:bc:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:51 2026 by rpki-client